Lucene search
+L

128 matches found

NVD
NVD
•added 2007/01/05 12:28 a.m.•31 views

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

6.8CVSS6.7AI score0.05722EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2007/01/05 12:00 a.m.•43 views

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

6.7AI score0.05722EPSS
SaveExploits2References6
CERT
CERT
•added 2006/12/13 12:00 a.m.•29 views

MySpace fails to properly filter user-supplied content

Overview The MySpace web site fails to properly filter user-supplied content, which may allow for cross-site scripting. Description MySpace is a social networking web site that allows users to post blog entries, photos, videos, and other content. MySpace blocks user-supplied JavaScript and VBScri...

6.2AI score
SaveExploits0References6
myhack58
myhack58
•added 2006/09/19 12:00 a.m.•26 views

Appalling analysis 2 0 0 0 0 a MySpace password-vulnerability warning-the black bar safety net

If you don't believe online how dangerous, then, may wish to look at this report, although such as the Nigerian Scam and other means has been widely known and recognized, but fully no one was going to believe it also wouldn't have this way. A foreign friend once accidentally got a MySpace in 2 0 ...

0.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2006/06/12 12:00 a.m.•27 views

freecodesource.txt

Freecodesource.com is a distributor of myspace profile mods and general crapola. They provide an swf file which allows a myspace user to pop an alert box on profile page load, with custom text; the text is extracted from the url of the swf file, then used as a get parameter 'what' to the url...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/05/19 12:00 a.m.•38 views

Myspace Friend Train v2.8

Myspace Friend Train v2.8 Full path disclosure & possible SQL injection. BRBR Its possible to put ' in the input myspace ID box to get the error. Example of the error is below: BRBR bInvalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server versio...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2005/08/31 12:00 a.m.•39 views

multiVulns.txt

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;'...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/08/29 12:00 a.m.•60 views

Multiple CMS/Forum Vulnablilties

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;' h1d3="size=24HIGHLIGHT...

9.1AI score
SaveExploits0
Rows per page
Query Builder